Unscored CVE-2017-2249 EUVD-2017-11432GHSA-c4wm-58w2-w4m2

Untrusted search path vulnerability in Self-extracting archive files created by Lhaz+ version 3.4.0 and earlier allows an attacker to gain …

Published Jul 14, 2017 · Updated Aug 5, 2024 · Assigned by jpcert

Vendor: Chitora soft Product: Self-extracting archive files created by Lhaz

Description

Untrusted search path vulnerability in Self-extracting archive files created by Lhaz+ version 3.4.0 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.

Affected products

Vendor	Product	Affected	Fixed
Chitora soft	Self-extracting archive files created by Lhaz+	version 3.4.0 and earlier	—

References

JVN#21369452 third-party-advisory
http://chitora.com/jvn21369452.html